FORM PTO-1449 


Docket Number (Optional) 


Application Number 






U«7/0O0,*t£r 


INFORMATION DISCLOSURE CITATION 


Applicant 






Peter AJ. van der Made 


/ ^ (Use*jweral sheets if necessary) 


Filing Date 


Group Art Unit 




June 19, 2001 


Not Assigned 





U.S. PATENT DOCUMENTS 


INITIAL 


javjBP^ 

DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE IF 
APPROPRIATE 


a 


4,400,769 


08-23-83 


Kaneda, et al. 










5,398,196 


03-14-95 


Chambers 










5,440,723 


08-08-95 


Arnold, et al. 




z 






5,675,711 


10-07-97 


Kephart, et al. 










5,696,822 


12-09-97 


Nachenberg 




2^ 






5,774,727 


06-30-98 


Walsh, etal. 


717 








5,864,803 


01-26-99 


Nussbaum 










5,872,978 


02-16-99 


Hoskins 


"717 








5,907,834 


05-25-99 


Kephart, et al. 




2o 




— TT^ 


6,092,194 


07-18-00 


Touboul 




Z^- 




^ 


6,118,940 


09-12-00 


Alexander, III, et al. 


717 


I2"7 






6,154,844 


11-28-00 


Touboul, et al. 










6,167,520 


12-26-00 


Touboul 


7% 


23 




















FOREIGN PATENT DOCUMENTS 




DOCUMENT NUMBER 


DATE 


COUNTRY 


CLASS 


SUBCLASS 


Translation 


YES 


NO 


; . * V>< — 


WO 99/15966 


04-01-99 


PCT 












































OTHER DOCUMENTS (Including Author, Title, Date, Pertinent Pages, Etc.) 




Frans Veldman, "Heuristic Anti-Virus Technology," Proceedings, 3 rd International Virus Bulletin Conference, pp. 67-76, 
September 1993. 




Symantec, "Understanding Heuristics: Symatec's Bloodhound Technology, Symantec White Paper Series, Vol. XXXIV, 
pp. 1-14, September 1997. 




Carey Stover Nachenberg, "A New Technique for Detecting Polymorphic Computer Viruses," A thesis submitted in partial 
satisfaction of the requirements for the degree Master of Science In Computer Science, University of California Los Angeles, 
pp. 1-127, 1995. 









DATE CONSIDERED -jf^iooC 


EXAMINER: Initial if citation considered, whether or not citation is in conformance with MPEP § 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to the applicant 



PTO/SB/ 08 (10-92) Patent and Trademark Office; U.S. DEPARTMENT OF COMMERCE 

Page 1 of 1 



\\\LA- 81924/2 -01 14521 vl 



FORM PTO-1449 

INFORMATION DISCLOSURE CHAJJ^fT^ 
IN AN APPLICATION /° 

(Use several sheets if necessary) ( ^ \ * ^ 

X^a 


Docket Number (Optional) 
81924.0002 


Application Number 
09/885,427 


.Applicant 

£v Peter A.J. van der Made 
*&\ 


Fgmg Date 

June 19, 2001 


Group Art Unit 

2122 


U.S. )^^p^CUMENTS 


EXAMINER 
INITIAL 


DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE IF 
APPROPRIATE 




5,398,196 


03-14-95 


Chambers 




Z8 






5,842,002 


11-24-98 


Schnurer, et al. 


To5 


<n i 






6,275,938 


08-14-01 


Bond, et al. 










6,357,008 


3-12-02 


Nachenberg 
































ftcffi 


m mCenter2mn 








































































FOREIGN PATENT DOCUMENTS 




DOCUMENT NUMBER 


DATE 


COUNTRY 


CLASS 


SUBCLASS 


Translation 


YES 


NO 


















































































OTHER DOCUMENTS (including Author, Title, Date, Pertinent Pages, Etc.) 































DATE CONSIDERED 7 /<n /h s~ 


EXAMINER: Initial if citation considered, whether or not citation is in conformance with MPEP § 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to the applicant. 



\\\LA • 81924/0002 • 131197 vl 



FORM PTO-1449 



INFORMATION DISCLOSURE CITATION 
IN AN APPLICATION 

(Use several sheets if necessary) 



Docket Number (SP&nal) 
81924.00G2 



Application Number 
09/885,427 



Applicant 



Peter A.J. van der Made 



Filing Date 

June 19, 2001 



Group Art Unit 

2122 



U.S. PATENT DOCUMENTS 


EXAMINER 
INITIAL 


DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE IF 
APPROPRIATE 




5,854,916 


12-29-98 


Nachenberg 










6,067,410 


05-23-00 


Nachenberg 










£V — 
















mSA 




































re Cl 










































































FOREIGN PATENT DOCUMENTS 




DOCUMENT NUMBER 


DATE 


COUNTRY 


CLASS 


SUBCLASS 


Translation 


YES 


NO 




International Search Report for 
PCT/US01/26804 


03-06-02 


PCT 










































































OTHER DOCUMENTS (Including Author, Title, Date, Pertinent Pages, Etc.) 




Andrew P. Kosoresow, et al., "Intrusion Detection Via System Call Traces," IEEE Software, pp. 35-42, September/October 
1997. 



























EXAMINER: Initial if citation considered, whether or not citation is in conformance with MPEP § 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to the applicant. 



\\\LA • 81934/0002 * 132038 vl 



Sheet 1 of 2 



FORM PTO- 1449, Adapted 

LIST OF INFORMATION DISCLOSED BY APPLICANT 

(Use several sheets if necessary) 


ATTV. DOCKET NO. 
05456.105039 


SERIAL NO. 
09/885,427 


FILING DATE f CS I R >v 

/ ^\ 
June 19, 2001 / cA 


APPLICANT 

Peter A«J. van der Made 


GR0UP L fIB J 2 20(B A 

2122 VSL /kf 


U.S. PATENT DOCUMENTS Xs?;b_ 


EXAMINER 

■ Hi IT! A t 

INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




A A 


S SQO W\ 


\ d J 1/7U 


T pu/ic pt 


"7 17 


) \ r 






AD 


C Qf.A QRQ 


I Ml 1 Li j j 




7(4 


* — , — ' 








J t /OJ,v/JU 


Ofi/fiQ/QR 
\jyj/\jy/yo 


lNalilCIIOCIg CI al. 


7(4" 








AH 


S 896 ftl ^ 






Su 


Ik 






AE 


6,199,181 


03/06/01 


Rechef et al. 


\i\4 


llr 






AF 


5,121,345 


06/09/92 


Lentz 










AG 


5,623,600 


04/22/97 


Ji et al. 




2^ 






AH 


5,649,095 


07/15/97 


Cozza 


n4| 








AI 


5,978,917 


11/02/99 


Chi 




2-2- 






AJ 


5,983,348 


11/09/99 


Ji 




i3 






AK 


6,029,256 


02/22/00 


Kouznetsov 


7\4 






FOREIGN PATENT DOCUMENTS 






DOCUMENT NUMBER 


DATE 


COUNTRY 


NAME 


TRANSLATION 
YES NO. 




AL 


0 636 977 A2 


02/01/95 


Europe 


David Alan Chambers 








AM 


WO 99/15966 


04/01/99 


PCT 










AN 
















AO 














OTHER REFERENCES (Including Author, Title, Date, Pertinent Pages, Etc.) 




AP 




"INFO: Visual Basic Supports P-Code and Native Code Compilation (Q229415)," found at 
http://support.microsoft.eom/suDport/kb/articles/0229/4/15.ASP. April 28, 1999, pp. 1-2. 




AR 




"Microsoft P-Code Technology," http://msdn.microsoft.com/archive/default.asp7urN/archive/en- 
us/dnarvc/htrnl/msdn„c7pcode2.asp, pp. 1-6, April 1992. 




AS 


\ 


"DJGPP COFF Spec." http://delorie.com/dieDD/doc/coff/. dd. 1-1 5. October 1996, 




AT 


\ 


Natvig, Kurt, "Sandbox Technology Inside AV Scanners/* Virus Bulletin Conference, September 2001, pp. 475- 
488. _ /> 


EXAMINER DATE CONS IDERED^j^ £ ^ j ~l fabfOSZOfl 



EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in conformance 



Sheet 2 of 2 



FORM PTO- 1449, Adapted 



LIST OF INFORMATION DISCLOSED BY AC 

(Use several sheets if necessary) 



^NT 



ATTY. DOCKET NO. 


SERIAL NO. 


HUNG DATE 






05456. 105039 


09/885,427 


June 19, 2001 


^ FEB 1 z 2003 


o\ 

ro| 

Oi J 


APPLICANT 




GROUP 












\ 4 




Peter A J. van der Made 




2122 







U.S. PATENT DOCUMENTS 



EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




BA 


6,081,894 


06/27/00 


Mann 










BB 


6,094,731 


07/25/00 


Waldin et al. 


7(4 








BC 


6,108,799 


08/22/00 


Boulayet al. 




3s 






BD 


6,119,165 


09/12/00 


Li et al. 




229 






BE 


6,122,738 


09/19/00 


Millard 


11? 


\2rr ■ 






BF 


6,272,641 


08/07/01 


Ji 


7% 








BG 


6,324,627 


1 1/27/01 


KrichefTet al. 


"711 








BH 


6,338,141 


01/08/02 


Wells 








BI 


6,397,242 


05/28/02 


Devine et al. 








BJ 


4,975,950 


12/04/90 


Lentz 








BK 












FOREIGN PATENT DOCUMENTS 






DOCUMENT NUMBER 


DATE 


COUNTRY 


NAME 


TRANSLATION 
YES NO. 




BL 
















BM 
















BN 
















BO 















£4 



BP 



"Norman introduces a new technique for eliminating new computer viruses/* found on Norman *s website, 
file://C:\Docurnents%20and%20Setti^ 1-2, 
published October 25, 2001, printed from website December 27, 2002. 



\ 




BR 



Lee et al., "A Generic Virus Detection Agent on the Internet," System Sciences, 1997, Proceedings of the Thirtieth 
Hawaii international Conference on Wailea, HI, January 7-10, 1997, pp. 210-219, #XP010271868. 



BS 



International Search Report for PCT/US0 1/19 142, international filing date June 14, 2001, mailing date January 17, 2003. 



BT 




EXAMINER DATE CONSIDERED 



EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in conformance and not 
considered. Include copy of this form with next communication to applicant. 



\P£\ Sheet 1 of 2 



FORM PTCKT449 AdaDted 

( m 1 8 ^ f 1ST OF INFORMATION DISCLOSED BY APPLICANT 

^/ (Use several sheets if necessary) 


ATTY.DOC&iSAi^ 

0S456.105039 


SERIAL NO. 

09/885,427 


FILING DATE 

June 19, 2001 


APPLICANT 

Peter A.J. van der Made 


GROUP 
2122 


U.S. PATENT DOCUMENTS 


EXAM USER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




AA 


5,857,191 


01/05/99 


Blackwell, Jr. et al. 


7- -f « — > 

7cT? 


RFC! 


ElVhU 




AB 


6,035,423 


03/07/00 


Hodges et al. 


— r . A 

in 


^ APR 2 


0 2003 




AC 


5,586,260 


12/17/96 


Hu 




technology 


(Center 2100 


ps 


AD 


5,623,601 


04/22/97 


Vu 


7% 






Os 


AE 


5,764,887 


06/09/98 


Kells et al. 




(4- 






AF 


5,787,177 


07/28/98 


Leppek 










AG 


5,796,942 


08/18/98 


Esbensen 




( ^> 




Os 


AH 


5,798,706 


08/25/98 


Kraemer et al 


726 








AI 


5,815,574 


09/29/98 


Fortinsky 










AJ 


5,828,833 


10/27/98 


Belville et al. 








Qs 


AK 


5,832,208 


11/03/98 


Chen et al. 


—7 /Is 






Os- 


AL 


5,832,211 


11/03/98 


Blakley, III et al. 


1% 








AM 


5,838,903 


11/17/98 


Blakely, III et al. 




r — 

5 




% 


AN 


5,864,665 


01/26/99 


Tran 




(0 






AN 


5,875,296 


02/23/99 


Shi et al. 




5 






AO 


5,983,270 


11/09/99 


Abraham et al. 


7©<?> 








AP 


5,987,606 


11/16/99 


Cirasole et al. 


726 


u 






AQ 


5,987,611 


11/16/99 


Freund 




4- 




U 


AR 


6,088,803 


07/11/00 


Tso et al. 




£2 




2a 


AS 


6,098,173 


08/01/00 


Elgressy et al. 


1Z& 


IT 





fS 1 P>s. Sheet 2 of 2 



rUKM Jrl\j-lv*y, AOaptCu <s \ 
1 °+ 

U M 2 8 2003 LIST OF INFORMATION DISCLOSED BY APPLICANT 

\. 1 


ATTY. DOC 

05456.105 


039 




SERIAL NO. 

09/885,427 


FILING DATE 

June 19, 2001 


APPLICANT 

Peter A.J. van der Made 


GROUP 
2122 


U.S. PATENT DOCUMENTS 


EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




BA 


6,119,234 


09/12/00 


Aziz et al. 




( i 




XL 


BB 


5,606,668 


02/25/97 


Shwed 




HfcOe 


:lVbu 


Q / 
CM 


BC 


5,835,726 


11/10/98 


Shwed et al. 




APR 0 






BD 


5,884,033 


03/16/99 


Duvall et al. 


( £>d 1 


ecnnoiogy 


f ontor 91 fin 




BE 


5,964,839 


10/12/99 


Johnson et al. 




no A. 




Pr 


BF 


6,041,347 


03/21/00 


Harsham et al. 




0 o ^ 




2/ 


BG 


6,061,795 


05/09/00 


Dircks et al. 


TO/ 


A 






BH 


6,085,224 


07/04/00 


Wagner 










BI 
















BJ 
















BK 
















BL 
















BM 
















BN 
















BN 




































X.. Q^JA) DATEC0NS,D6R£D v^o/2o^ 


EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to applicant. 



Sheet 1 of 2 




, ' t\ LIST OF 
MAY 1 4 2003 jJ 



DISCLOSED 

(Xfre several sheets if necessary) 



^JtTY. DOCKETJidl' 

05456.1^039 



SERIAL NO. 

09/885,427 



PILING DATE 

June 19^2001 



APPLICANT 

Peter A.J. van der Made 



GROUP 
2122 



U.S. PATENT DOCUMENTS 



EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


f*l ACQ 


<L1\nCl ACQ 


PI1 INfi DATF 
r i jui i ~ vj unit 

IF APPROPRIATE 


Vc, 


AA 


5,345,595 


09/06/94 


Johnson et al. 1 










AB 


6,266,774 


07/24/01 


Sampath et al. 










AC 


6,026,442 


02/15/00 


Lewis et al. 










AD 


6,016,553 


01/18/00 


Schneider et al. 


--7 / A 


0 1 






AE 


6,014,645 


01/11/00 


Cunningham 




28 J 


:eived 




AF 


5,881,236 


03/09/99 


Dickey 




00 I 
, l MAY 


1 5 2003 




AG 


5,764,890 


06/09/98 


Glasser et al. 


72G 


({ 

Technolo 


gy Center 2100 


<LLt / 


AH 


5,630,061 


05/13/97 


Richter et al. 










AI 


5,414,833 


05/09/95 


Hershey et al. 


72.Q 








AJ 


4,819,234 


04/04/89 


Huber 


in 








AK 


5,950,012 


09/07/99 


Shiell et al 


in 








AL 


5,278,901 


01/1 1/94 


Shieh et al 


12c 






&r 


AM 


6,405,318 


06/11/02 


Rowland 


\>% 


22 




ft,- 


AN 


5,475,839 


12/12/95 


Watson et al. 


n3 








AO 


5,761,504 


06/02/98 


Corrigan et al. 


n3 






?o 


AP 


.1359,659 


10/25/94 


Rosenthal 


72-6 







EXAMINER 



DATE CONSIDERED 



EXAMINER: Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to applicant. 



Sheet 2 of 2 



I mm 1 ^ LIST OF INFORMATION DISCLOSED BY APPLICANT 

\i f: (Use several sheets if necessary) 


A?T&X. DOCKET SERIAL NO. 

05456.105039 09/885,427 


FILING DATE 

June 19, 2001 


APPLICANT 

Peter A. J. van der Made 


GROUP 
2122 


U.S. PATENT DOCUMENTS 


EXAMINER 
INITIAL 




DOCUMENT NUMBER 


DATE 


NAME 


CLASS 


SUBCLASS 


FILING DATE 
IF APPROPRIATE 




BA 


5,452,442 


09/19/95 


Kephart 


7 |4 








BB 


5,511,184 


04/23/96 


Lin 


Ho 


241 






BC 


5,822,517 


10/13/98 


Dotan 








FOREIGN PATENT DOCUMENTS 






DOCUMENT NUMBER 


DATE 


COUNTRY 


NAME 


TRANSLATION 
YES NO. 




BD 


WO 01/84285 


11/08/01 


PCT 


Internet Security Systems, Inc. 








BE 


WO 02/06928 


01/24/02 


PCT 


vCIS, Inc. 








BF 


WO 00/54458 


09/14/00 


PCT 


Psionic Software, Inc. jf^E^ 




ITED 




BG 


WO 02/056152 


07/18/02 


PCT 


Psionic Software, Inc. ^ 




m — 




BH 
















BI 








lechno 


logy Cei 


Ha 2100 




BJ 
















BK 
















BL 
















BM 
















BN 
















BO 














OTHER REFERENCES (Including Author, Title, Date, Pertinent Pages, Etc.) 




.BP 




Gong, Li, "Java™ Security Architecture (JDK 1.2)," October 2, 1998, Sun Microsystems, Inc., Version 1.0, 
pp. i-iv, 1-62. 


2> 


BQ 




"Softworks Limited VBVM Whitepaper," [online] 1 1/3/98 [accessed 3/19/2003], Retrieved from Internet 
<URL: htto://web.archive.ore/web/ 19981 203 105455/hto://softworksltd.corn/vbvm.html>, pp. 1-4. 




BR 




Kephart, "A Biologically Inspired Immune System for Computers," Artificial Life, IV, 1994, pp. 130-139. 




BS 






EXAMtNER ^ ^ ""^/i/aaof, 


EXAMINER; Initial if reference considered, whether or not citation is in conformance with MPEP 609; Draw line through citation if not in 
conformance and not considered. Include copy of this form with next communication to applicant. 



